Information Security Engineer II

Information Security Engineer II

Become an everyday champion — and build a career where your impact fuels financial progress.

CardWorks Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, CardWorks Financial Group tackles the complex challenges that larger financial institutions leave behind. We're embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer.

With nearly 40 years of operating history, our track record is solid: disciplined in downturns and built to accelerate in recovery. The CardWorks Financial Group companies take a precise approach in complex markets, as a top three non-prime focused general purpose card issuer and a top fifteen U.S. merchant acquirer.

Our team tackles the industry's most complex credit and payment challenges. And we believe that excellent work starts with a team that feels supported, respected, and empowered to grow.

CardWorks Servicing, LLC provides end-to-end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offer backup servicing and due diligence services to capital providers and trustees.

Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services, and bank sponsorships to consumers and businesses.

Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

Job Duties:

• Implement, operate, monitor, and improve information security processes and systems that protect the Bank's data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism.
• Perform security incident event management and network intrusion detection using security concepts, defense-in-depth strategies, security tools, and protocols.
• Engage in the support of security-focused tools and services.
• Conduct security event monitoring, investigation, detection, and incident response, including log analysis and documentation of investigations.
• Perform incident response on escalated tickets.
• Participate in major incident response engagements.
• Use a variety of tools to monitor system and application log alerts for indication of unauthorized activity and perform analysis on infected systems.
• Engineer, tune, and operate log sources, alerts, rules, and monitors in the Security Information and Event Management (SIEM) platform, that collects, correlates, and analyzes security logs and events in real-time to detect threats and enable rapid incident response.
• Work with IT Security Engineers and assist with gathering information during penetration testing, incident handling/digital forensics, continuous monitoring, and intrusion detection/prevention.
• Work with auditors to provide the required evidence of compliance with the regulatory bodies.
• Comply with all the Bank's internal control policies and procedures.
• Understand and comply with all laws and regulations to which the Bank is subject.
• Communicate problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
• Communicate security issues and risks to individuals with technical and non-technical backgrounds.
• Troubleshoot and problem-solve complex security, hardware, and network systems.
• Research cybersecurity and technology trends, news, and hacking techniques.
• Use Kusto Query Language (KQL) to run advanced queries for threat hunting, anomaly detection, and security event investigations in the XDR platform.
• Work from home benefit provided. Worksites are unanticipated.
• Required to travel to 10705 South Jordan Gateway, South Jordan, Utah 84095 one day per week.

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a closely related field.

Experience: Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation.

Special Requirements: Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation must be in the Credit Card Industry or Consumer Finance Industry.

Demonstrable knowledge and prior experience in:

• Advanced security event monitoring, investigation, and response capabilities.
• Engineering, tuning, and operating on the SIEM platform.
• Security concepts, defense-in-depth strategies, security tools, and protocols.
• Communicating security issues and risks to individuals with technical and non-technical backgrounds.
• Troubleshooting and problem-solving complex security, hardware, and network systems.
• Researching cybersecurity and technology trends, news, and hacking techniques.
• Kusto Query Language (KQL).

Travel Requirements: Required to travel to 10705 South Jordan Gateway, South Jordan, Utah 84095 one day per week.

Work Hours: Full-time, 40 hours/week, 8:00 a.m. – 5:00 p.m., Monday – Friday

Our Employee Value Proposition

• Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
• Benefits Package - Medical, Dental, and Vision (plus much more)
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD&D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition

We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.

We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.

If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.